cvs commit: src/sys/net if_ethersubr.c

[David Malone]

> >   Return EACCES rather than ENOBUFS if ipfw blocks a packet on the
> >   way out at layer 2.

> I think ipfw returns EPERM when denying packets through some other
> paths.  

Previously I'd just made sure that blocking a ping at layer 2 and
layer 3 return the same error after this commit. I just did a quick
check. Ip_output returns EACCES, ip_input and ether_demux can't
return an error.

Ipfw does return EPERM if you try to alter the rules but aren't
permitted to, but that's a different situation I guess.

	David.